umg8 Privacy Policy — Your Data, Your Rights

1 Introduction

umg8 operates an online sports betting and live casino platform accessible to players throughout Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations. This Privacy Policy sets out how umg8 collects, processes, stores, transfers, and protects personal data in connection with operating the platform, managing player accounts, facilitating MYR payments, and fulfilling compliance obligations.

This policy applies to personal data collected when you visit the umg8 website, register an account, deposit or withdraw funds, place a sports or casino wager, contact customer support, participate in a promotion, or otherwise interact with umg8. It should be read together with the Terms & Conditions and the Responsible Gambling page, both of which contain additional obligations that govern your relationship with umg8.

2 Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

• Personal Data means any information that identifies or can reasonably be used to identify a living individual, directly or indirectly.
• Processing means any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion.
• Data Subject means the individual whose personal data is being processed — in this context, you as a registered or prospective umg8 player.
• Controller means umg8, the entity that determines the purposes and means of processing personal data described in this policy.
• Processor means a third party that processes personal data on behalf of umg8, such as a KYC verification provider, payment gateway, or fraud-prevention service.
• Consent means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.

3 Personal Data We Collect

umg8 collects personal data through direct registration, account activity, transaction processing, technical logging, and customer communications. Categories of personal data may include, but are not limited to:

3.1 Registration and Identity Data

Full legal name, date of birth, residential address, email address, and mobile number provided when creating an account. Where required, a copy of a government-issued identity document — such as a Malaysian MyKad or passport — and a recent proof of address document.

3.2 Payment and Financial Data

Details of the payment method used for deposits and withdrawals, which may include e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or bank account identifiers for FPX transactions through Maybank, CIMB, Public Bank, Hong Leong Bank, and other participating Malaysian banks. Cryptocurrency wallet addresses where BTC or USDT transactions are made. Transaction dates, amounts in MYR, references, and confirmation records.

3.3 Betting and Gameplay Data

Records of bets placed, markets selected, stake amounts, odds accepted, settlement outcomes, casino game sessions, slots played, and bonus redemptions. This data supports account management, dispute resolution, and responsible gambling monitoring.

3.4 Technical and Device Data

IP address, browser type and version, operating system, device identifiers, session timestamps, referring URL, pages visited, and click-stream data collected automatically when you use the platform. This information is used for security monitoring, performance optimisation, fraud prevention, and regulatory audit purposes.

3.5 Communications Data

Records of your correspondence with umg8 customer support — via live chat, email, or other supported channels — including the content of communications, timestamps, and case identifiers. This data is retained to facilitate accurate resolution of enquiries and to maintain quality standards.

4 How We Use Your Personal Data

umg8 uses collected personal data for the following principal purposes:

5 Legal Basis for Processing

umg8 processes personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contract performance: processing necessary to create and operate your account, execute wagers, process payments, and manage the player relationship.
• Legal obligation: processing required to meet identity-verification, record-keeping, anti-money-laundering, and other applicable compliance requirements.
• Legitimate interests: processing carried out to prevent fraud, secure the platform, improve service quality, and detect prohibited conduct, where these interests are not overridden by your rights and interests.
• Consent: where umg8 seeks consent for a specific data use, such as optional marketing communications, that consent may be withdrawn at any time. Withdrawal of marketing consent does not affect the lawfulness of prior processing or processing based on other grounds.

6 Sharing and Disclosure

umg8 does not sell, rent, or trade personal data. We may share information in the following circumstances:

6.1 Service Providers and Processors

Trusted third-party providers engaged to perform functions on behalf of umg8, including payment gateways for Malaysian e-wallet and bank transfer processing, identity and age verification suppliers, fraud detection services, game platform operators, server infrastructure providers, and customer support tools. Each processor is bound by a data processing agreement and may only process data for the purposes specified by umg8.

6.2 Legal and Regulatory Authorities

Where required by a court order, statutory obligation, regulatory instruction, or other legitimate legal process, umg8 may disclose personal data to law enforcement, financial intelligence units, or other competent public bodies. umg8 will disclose only the minimum information required and, where legally permitted, will notify the affected player.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or transfer of the umg8 business or assets, personal data held by umg8 may be transferred to a successor entity, subject to that entity continuing to process the data in accordance with this Privacy Policy or an equivalent standard.

6.4 Consent-Based Sharing

Where you have given specific, informed consent for umg8 to share your data with a named third party for a stated purpose, that sharing will occur in accordance with your instructions and this policy.

7 Data Retention

umg8 retains personal data for as long as your account remains active and for a reasonable period thereafter to fulfil the purposes described in this policy, to comply with applicable legal retention obligations, and to resolve disputes or enforce agreements.

KYC documentation, transaction records, and betting history may be retained for a minimum period required under applicable financial, anti-money-laundering, and gambling regulatory requirements, even after account closure. When data is no longer required for any applicable purpose, umg8 will delete or anonymise it in a manner consistent with recognised data security standards.

If you request account closure and deletion of personal data, umg8 will review the request against legal retention requirements, pending obligations, and open dispute status before confirming what action is possible and within what timeframe. We will communicate clearly about any data that must be retained.

8 Security Measures

umg8 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data held. These measures include, but are not limited to:

• Transport Layer Security (TLS) and 256-bit SSL encryption for all data transmission between your device and the umg8 platform;
• access controls and role-based permissions that restrict internal data access to personnel who need it to perform defined functions;
• regular security assessments and monitoring of platform infrastructure and payment systems;
• pseudonymisation and encryption of sensitive fields where technically applicable; and
• procedures for detecting, reporting, and responding to personal data breaches in a timely manner.

No data transmission over the internet or electronic storage system can be guaranteed as completely secure. You are responsible for maintaining the confidentiality of your account login credentials, and you should notify umg8 promptly if you suspect any unauthorised access to your account.

9 Cookies and Tracking Technologies

umg8 uses cookies and similar technologies to maintain session state, remember account preferences, monitor platform performance, and support security and fraud-prevention measures. These are primarily functional and session-based cookies required for the platform to operate correctly.

9.1 Essential Cookies

Session identifiers, authentication tokens, and security cookies that are strictly necessary to provide the platform's core functions. These cannot be disabled without disrupting your ability to log in and use the service.

9.2 Performance and Analytics Cookies

Aggregated data on page load times, feature usage, and error frequency that helps umg8 identify performance issues and improve the experience for Malaysian players. This data does not identify individual users.

9.3 Preference Cookies

Cookies that remember settings such as display preferences or language selection so that you do not need to re-enter them on each visit.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the umg8 platform. Continuing to use umg8 after being informed of our cookie use constitutes acceptance of cookies as described in this section.

10 Your Data Rights

Subject to applicable law and legitimate operational constraints, you have the following rights in relation to personal data held by umg8:

To exercise any of these rights, contact our support team via live chat or at [email protected]. Please provide your registered username and a clear description of your request. We will respond within a reasonable period and may require identity verification before processing certain requests.

Where a request conflicts with a legal obligation, legitimate security interest, or open compliance matter, we will explain the applicable limitation in clear terms rather than simply declining.

11 Minors and Age Restriction

umg8 is strictly for players aged 21 and above. The platform is not intended for, and does not knowingly collect personal data from, individuals below this age. Registration requires confirmation of date of birth, and KYC verification is performed to confirm age eligibility before unrestricted access and withdrawal rights are granted.

If umg8 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted and the associated account will be closed. Any funds held in connection with that account will be handled in accordance with applicable legal obligations. If you believe an underage individual has registered, please notify umg8 support immediately.

12 Changes to This Privacy Policy

umg8 may revise this Privacy Policy from time to time to reflect changes in applicable law, data processing practices, new platform features, payment method additions, or organisational structure. The updated effective date at the top of this page will reflect the version currently in force.

Significant changes that materially affect your rights or the way your data is used will be communicated through a notice on the platform or via the email address registered to your account before the changes take effect. Continued use of umg8 after the stated effective date of any revision constitutes acceptance of the updated policy. You should review this page periodically and particularly before continuing to use the platform following any notified update.

13 Contact Us

If you have a question about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how umg8 handles your personal information, please contact our support team using the details below. Include your registered account username and a description of your enquiry. Do not include passwords or one-time verification codes.